.. _envoy_v3_api_file_envoy/extensions/transport_sockets/tls/v3/common.proto: Common TLS configuration ======================== .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.TlsParameters: extensions.transport_sockets.tls.v3.TlsParameters ------------------------------------------------- `[extensions.transport_sockets.tls.v3.TlsParameters proto] `_ .. code-block:: json { "tls_minimum_protocol_version": "...", "tls_maximum_protocol_version": "...", "cipher_suites": [], "ecdh_curves": [] } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsParameters.tls_minimum_protocol_version: tls_minimum_protocol_version (:ref:`extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol `) Minimum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_0`` for servers. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsParameters.tls_maximum_protocol_version: tls_maximum_protocol_version (:ref:`extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol `) Maximum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_3`` for servers. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsParameters.cipher_suites: cipher_suites (`string `_) If specified, the TLS listener will only support the specified `cipher list `_ when negotiating TLS 1.0-1.2 (this setting has no effect when negotiating TLS 1.3). If not specified, the default list will be used. In non-FIPS builds, the default cipher list is: .. code-block:: none [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305] [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305] ECDHE-ECDSA-AES128-SHA ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA In builds using :ref:`BoringSSL FIPS `, the default cipher list is: .. code-block:: none ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsParameters.ecdh_curves: ecdh_curves (`string `_) If specified, the TLS connection will only support the specified ECDH curves. If not specified, the default curves will be used. In non-FIPS builds, the default curves are: .. code-block:: none X25519 P-256 In builds using :ref:`BoringSSL FIPS `, the default curve is: .. code-block:: none P-256 .. _envoy_v3_api_enum_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol: Enum extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol ------------------------------------------------------------------ `[extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol proto] `_ .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol.TLS_AUTO: TLS_AUTO *(DEFAULT)* ⁣Envoy will choose the optimal TLS version. .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol.TLSv1_0: TLSv1_0 ⁣TLS 1.0 .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol.TLSv1_1: TLSv1_1 ⁣TLS 1.1 .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol.TLSv1_2: TLSv1_2 ⁣TLS 1.2 .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.TlsParameters.TlsProtocol.TLSv1_3: TLSv1_3 ⁣TLS 1.3 .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.PrivateKeyProvider: extensions.transport_sockets.tls.v3.PrivateKeyProvider ------------------------------------------------------ `[extensions.transport_sockets.tls.v3.PrivateKeyProvider proto] `_ BoringSSL private key method configuration. The private key methods are used for external (potentially asynchronous) signing and decryption operations. Some use cases for private key methods would be TPM support and TLS acceleration. .. code-block:: json { "provider_name": "...", "typed_config": "{...}" } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.PrivateKeyProvider.provider_name: provider_name (`string `_, *REQUIRED*) Private key method provider name. The name must match a supported private key method provider type. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.PrivateKeyProvider.typed_config: typed_config (`Any `_) Private key method provider specific configuration. .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.TlsCertificate: extensions.transport_sockets.tls.v3.TlsCertificate -------------------------------------------------- `[extensions.transport_sockets.tls.v3.TlsCertificate proto] `_ .. code-block:: json { "certificate_chain": "{...}", "private_key": "{...}", "private_key_provider": "{...}", "password": "{...}", "ocsp_staple": "{...}" } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.certificate_chain: certificate_chain (:ref:`config.core.v3.DataSource `) The TLS certificate chain. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key: private_key (:ref:`config.core.v3.DataSource `) The TLS private key. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key_provider: private_key_provider (:ref:`extensions.transport_sockets.tls.v3.PrivateKeyProvider `) BoringSSL private key method provider. This is an alternative to :ref:`private_key ` field. This can't be marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key ` and :ref:`private_key_provider ` fields will result in an error. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.password: password (:ref:`config.core.v3.DataSource `) The password to decrypt the TLS private key. If this field is not set, it is assumed that the TLS private key is not password encrypted. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.ocsp_staple: ocsp_staple (:ref:`config.core.v3.DataSource `) The OCSP response to be stapled with this certificate during the handshake. The response must be DER-encoded and may only be provided via ``filename`` or ``inline_bytes``. The response may pertain to only one certificate. .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.TlsSessionTicketKeys: extensions.transport_sockets.tls.v3.TlsSessionTicketKeys -------------------------------------------------------- `[extensions.transport_sockets.tls.v3.TlsSessionTicketKeys proto] `_ .. code-block:: json { "keys": [] } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsSessionTicketKeys.keys: keys (:ref:`config.core.v3.DataSource `, *REQUIRED*) Keys for encrypting and decrypting TLS session tickets. The first key in the array contains the key to encrypt all new sessions created by this context. All keys are candidates for decrypting received tickets. This allows for easy rotation of keys by, for example, putting the new key first, and the previous key second. If :ref:`session_ticket_keys ` is not specified, the TLS library will still support resuming sessions via tickets, but it will use an internally-generated and managed key, so sessions cannot be resumed across hot restarts or on different hosts. Each key must contain exactly 80 bytes of cryptographically-secure random data. For example, the output of ``openssl rand 80``. .. attention:: Using this feature has serious security considerations and risks. Improper handling of keys may result in loss of secrecy in connections, even if ciphers supporting perfect forward secrecy are used. See https://www.imperialviolet.org/2013/06/27/botchingpfs.html for some discussion. To minimize the risk, you must: * Keep the session ticket keys at least as secure as your TLS certificate private keys * Rotate session ticket keys at least daily, and preferably hourly * Always generate keys using a cryptographically-secure random data source .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.CertificateValidationContext: extensions.transport_sockets.tls.v3.CertificateValidationContext ---------------------------------------------------------------- `[extensions.transport_sockets.tls.v3.CertificateValidationContext proto] `_ .. code-block:: json { "trusted_ca": "{...}", "verify_certificate_spki": [], "verify_certificate_hash": [], "match_subject_alt_names": [], "crl": "{...}", "allow_expired_certificate": "...", "trust_chain_verification": "..." } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca: trusted_ca (:ref:`config.core.v3.DataSource `) TLS certificate data containing certificate authority certificates to use in verifying a presented peer certificate (e.g. server certificate for clusters or client certificate for listeners). If not specified and a peer certificate is presented it will not be verified. By default, a client certificate is optional, unless one of the additional options (:ref:`require_client_certificate `, :ref:`verify_certificate_spki `, :ref:`verify_certificate_hash `, or :ref:`match_subject_alt_names `) is also specified. It can optionally contain certificate revocation lists, in which case Envoy will verify that the presented peer certificate has not been revoked by one of the included CRLs. Note that if a CRL is provided for any certificate authority in a trust chain, a CRL must be provided for all certificate authorities in that chain. Failure to do so will result in verification failure for both revoked and unrevoked certificates from that chain. See :ref:`the TLS overview ` for a list of common system CA locations. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki: verify_certificate_spki (`string `_) An optional list of base64-encoded SHA-256 hashes. If specified, Envoy will verify that the SHA-256 of the DER-encoded Subject Public Key Information (SPKI) of the presented certificate matches one of the specified values. A base64-encoded SHA-256 of the Subject Public Key Information (SPKI) of the certificate can be generated with the following command: .. code-block:: bash $ openssl x509 -in path/to/client.crt -noout -pubkey | openssl pkey -pubin -outform DER | openssl dgst -sha256 -binary | openssl enc -base64 NvqYIYSbgK2vCJpQhObf77vv+bQWtc5ek5RIOwPiC9A= This is the format used in HTTP Public Key Pinning. When both: :ref:`verify_certificate_hash ` and :ref:`verify_certificate_spki ` are specified, a hash matching value from either of the lists will result in the certificate being accepted. .. attention:: This option is preferred over :ref:`verify_certificate_hash `, because SPKI is tied to a private key, so it doesn't change when the certificate is renewed using the same private key. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash: verify_certificate_hash (`string `_) An optional list of hex-encoded SHA-256 hashes. If specified, Envoy will verify that the SHA-256 of the DER-encoded presented certificate matches one of the specified values. A hex-encoded SHA-256 of the certificate can be generated with the following command: .. code-block:: bash $ openssl x509 -in path/to/client.crt -outform DER | openssl dgst -sha256 | cut -d" " -f2 df6ff72fe9116521268f6f2dd4966f51df479883fe7037b39f75916ac3049d1a A long hex-encoded and colon-separated SHA-256 (a.k.a. "fingerprint") of the certificate can be generated with the following command: .. code-block:: bash $ openssl x509 -in path/to/client.crt -noout -fingerprint -sha256 | cut -d"=" -f2 DF:6F:F7:2F:E9:11:65:21:26:8F:6F:2D:D4:96:6F:51:DF:47:98:83:FE:70:37:B3:9F:75:91:6A:C3:04:9D:1A Both of those formats are acceptable. When both: :ref:`verify_certificate_hash ` and :ref:`verify_certificate_spki ` are specified, a hash matching value from either of the lists will result in the certificate being accepted. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.match_subject_alt_names: match_subject_alt_names (:ref:`type.matcher.v3.StringMatcher `) An optional list of Subject Alternative name matchers. Envoy will verify that the Subject Alternative Name of the presented certificate matches one of the specified matches. When a certificate has wildcard DNS SAN entries, to match a specific client, it should be configured with exact match type in the :ref:`string matcher `. For example if the certificate has "\*.example.com" as DNS SAN entry, to allow only "api.example.com", it should be configured as shown below. .. code-block:: yaml match_subject_alt_names: exact: "api.example.com" .. attention:: Subject Alternative Names are easily spoofable and verifying only them is insecure, therefore this option must be used together with :ref:`trusted_ca `. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.crl: crl (:ref:`config.core.v3.DataSource `) An optional `certificate revocation list `_ (in PEM format). If specified, Envoy will verify that the presented peer certificate has not been revoked by this CRL. If this DataSource contains multiple CRLs, all of them will be used. Note that if a CRL is provided for any certificate authority in a trust chain, a CRL must be provided for all certificate authorities in that chain. Failure to do so will result in verification failure for both revoked and unrevoked certificates from that chain. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.allow_expired_certificate: allow_expired_certificate (`bool `_) If specified, Envoy will not reject expired certificates. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trust_chain_verification: trust_chain_verification (:ref:`extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification `) Certificate trust chain verification mode. .. _envoy_v3_api_enum_extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification: Enum extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification -------------------------------------------------------------------------------------------- `[extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification proto] `_ Peer certificate verification mode. .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification.VERIFY_TRUST_CHAIN: VERIFY_TRUST_CHAIN *(DEFAULT)* ⁣Perform default certificate verification (e.g., against CA / verification lists) .. _envoy_v3_api_enum_value_extensions.transport_sockets.tls.v3.CertificateValidationContext.TrustChainVerification.ACCEPT_UNTRUSTED: ACCEPT_UNTRUSTED ⁣Connections where the certificate fails verification will be permitted. For HTTP connections, the result of certificate verification can be used in route matching. ( see :ref:`validated ` ).